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In the Claims 

Please replace all prior versions, and listings, of claims in the application with the 
following list of claims, with additions shown in underlining and deletions shown in 
strikethrough: 

1 . (Currently Amended) A method of securely executing on a computer system an 
application for receiving, from a user of the computer system, at least one response to at least 
one question of an examination, the computer system comprising an input device and a display 
device for displaying content to the user, the method comprising acts of: 

(A) executing the application on the computer system, comprising displaying an area 
on the display device in which the user can enter a response to at least one question of the 
examination, and enabling the user to use the input device to input a response for one or more of 
the questions into the displayed area; and 

(B) prohibiting the computer system from accessing any unauthorized content during 
execution of the application and from displaying any authorized content to the user during 
execution of the application, 

wherein the act (B) comprises detecting and terminating any unauthorized processes 
executing during the displaying of the area on the display devicei 

wherein act (B)(\) comprises acts of (a) detecting any processes executing on the 
computer system during execution of the application, (b) for each detected process, determining 
if the detected process is authorized to execute on the computer system during execution of the 
a pplication, and (c) for each detected process, if the detected process is unauthorized, terminating 
the detected process, and 

wherein the computer system comprises a registry that lists all processes currently 
executing on the computer system, and act (BXlVa) comprises an act of periodically accessing 
the registry on the computer system at predefined intervals to ascertain the processes currently 
executing on the computer system . 

2. (Original) The method of claim 1, wherein act (A) further comprises an act of displaying 
the at least one question of the examination on the display device. 
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3. (Original) The method of claim 1, wherein prior to performance of act (A) 5 one or more 
unauthorized processes are executing on the computer system, wherein act (B) comprises an act 
of terminating the one or more unauthorized processes prior to performing act (A). 

4. (Original) The method of claim 1, wherein act (B) comprises an act of (1) configuring 
the application such that unauthorized content cannot be accessed by the application. 

5. (Original) The method of claim 4, wherein act (B)(1) comprises an act of configuring the 
application such that unauthorized processes cannot be initiated by the application. 

6. (Original) The method of claim 1, wherein act (B) comprises an act of (1) prior to 
executing act (A), disabling any functions on the computer system capable of performing at least 
one of the following: accessing unauthorized content and displaying unauthorized content to a 
user of the computer system. 

7. (Original) The method of claim 6, wherein act (B)(1) comprises an act of disabling any 
functions on the computer system that are capable of initiating unauthorized processes on the 
computer system. 

8. (Original) The method of claim 6, wherein act (B)(1) comprises an act of configuring 
one or more programming hooks of the computer system. 

9. (Cancelled). 

10. (Previously presented) The method of claim 1, further comprising: 
(D) recording each detection of an unauthorized process. 

11. (Cancelled). 

12. (Cancelled). 
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13. (Original) The method of claim 12, further comprising an act of: 
(C) managing a list of unauthorized processes, 

wherein act (B)(1)(b) comprises an act of, for each detected process, comparing the 
detected process to the list of unauthorized processes, and wherein act (B)(1)(c) comprises, for 
each detected process, terminating the detected process if the detected process is on the list. 

14. (Original) The method of claim 12, further comprising an act of: 

(C) managing a list of processes authorized to be executed on the computer system, 
wherein act (B)(1)(b) comprises an act of, for each detected process, comparing the 
detected process to the list of authorized processes, and wherein act (B)(1)(c) comprises, for each 
detected process, terminating the detected process if the detected process is not on the list. 

15. (Currently Amended) An apparatus for securely executing on a computer system an 
application for receiving, from a user of the computer system, at least one response to at least 
one question of an examination, the computer system comprising an input device and a display 
device for displaying content to the user, the apparatus comprising: 

an application execution component to execute the application on the computer system, 
comprising display logic to display an area on the display device in which the user can enter a 
response to at least one question of the examination, and input logic to enable the user to use the 
input device to input a response for one or more of the questions into the displayed area; and 

a security component to prohibit the computer system from accessing any unauthorized 
content during execution of the application and from displaying any authorized content to the 
user during execution of the application, 

wherein the security component detects and terminates any unauthorized processes 
executing during the displaying of the area on the display devicei 

wherein the process-terminating logic comprises detection logic to detect any processes 
executing on the computer system during execution of the application, determining logic to 
determine, for each detected process, if the detected process is authorized to execute on the 
computer system during execution of the application, and terminating logic to terminate, for each 
detected process, the detected process if the detected process is unauthorized, and 

wherein the computer system comprises a registry that lists all processes currently 
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executing on the computer system, and wherein the detection logic is operative to periodically 
access the registry on the computer system at predefined intervals to ascertain the processes 
currently executing on the computer system . 

16. (Original) The apparatus of claim 15, wherein the display logic is operative to display 
the at least one question of the examination on the display device. 

17. (Original) The apparatus of claim 15, wherein the security component comprises 
process-terminating logic to terminate any unauthorized processes executing on the computer 
system prior to execution of the application. 

18. (Original) The apparatus of claim 15, wherein the security component comprises 
application-configuring logic to configure the application such that unauthorized content cannot 
be accessed by the application. 

19. (Original) The apparatus of claim 18, wherein the application-configuring logic is 
operative to configure the application such that unauthorized processes cannot be initiated by the 
application. 

20. (Original) The apparatus of claim 15, wherein the security component comprises 
function-disabling logic to disable, prior to execution of the application, any functions on the 
computer system capable of performing at least one of the following: accessing unauthorized 
content and displaying unauthorized content to a user of the computer system. 

21 . (Original) The apparatus of claim 20, wherein the function-disabling logic is operative to 
disable any functions on the computer system that are capable of initiating processes on the 
computer system. 

22. (Original) The apparatus of claim 20, wherein the function-disabling logic is operative to 
configure one or more programming hooks of the computer system. 
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23. (Cancelled). 

24. (Previously presented) The apparatus of claim 15, wherein the security component 
comprises recording logic to record each detection of an unauthorized process. 

25. (Cancelled). 

26. (Cancelled). 

27. (Original) The apparatus of claim 25, wherein the security component further comprises 
list-managing logic to maintain a list of unauthorized processes not authorized to be executed on 
the computer system, the determining logic is operative to compare, for each detected process, 
the detected process to the list of unauthorized processes, and the terminating logic is operative 
to terminate, for each detected process, the detected process if the detected process is on the list. 

28. (Original) The apparatus of claim 25, wherein the security component further comprises 
list-managing logic to maintain a list of processes authorized to be executed on the computer 
system, the determining logic is operative to compare, for each detected process, the detected 
process to the list of authorized processes, and the terminating logic is operative to terminate, for 
each detected process, the detected process if the detected process is not on the list. 

29. (Currently Amended) An apparatus for securely executing on a computer system an 
application for receiving, from a user of the computer system, at least one response to at least 
one question of an examination, the computer system comprising an input device and a display 
device for displaying content to the user, the apparatus comprising: 

means for executing the application on the computer system, comprising displaying an 
area on the display device in which the user can enter a response to at least one question of the 
examination, and enabling the user to use the input device to input a response for one or more of 
the questions into the displayed area; and 

means for prohibiting the computer system from accessing any unauthorized content 
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during execution of the application and from displaying any authorized content to the user during 
execution of the application, 

wherein the means for prohibiting detects and terminates any unauthorized processes 
executing during the displaying of the area on the display device^ 

wherein the means for prohibiting comprises means for detecting any processes executing 
on the computer system during execution of the application, means for determining, for each 
detected process, if the detected process is authorized to execute on the computer system during 
execution of the application, and means for terminating each detected process determined to be 
unauthorized, and 

wherein the computer system comprises a registry that lists all processes currently 
executing on the computer system, and the means for prohibiting comprises means for 
periodically accessing the registry on the computer system at predefined intervals to ascertain the 
processes currently executing on the computer system . 

30. (Original) The apparatus of claim 29, wherein the means for executing the application 
further comprises means for displaying the at least one question of the examination on the 
display device. 

3 1 . (Original) The apparatus of claim 29, wherein the means for prohibiting comprises 
means for terminating any unauthorized processes executing on the computer system prior to 
execution of the application. 

32. (Original) The apparatus of claim 29, wherein the means for prohibiting comprises 
means for configuring the application such that unauthorized content cannot be accessed by the 
application. 

33. (Original) The apparatus of claim 32, wherein the means for prohibiting comprises 
means for configuring the application such that unauthorized processes cannot be initiated by the 
application. 
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34. (Original) The apparatus of claim 29, wherein the means for prohibiting comprises 
means for disabling, prior to execution of the application, any functions on the computer system 
capable of performing at least one of the following: accessing unauthorized content and 
displaying unauthorized content to a user of the computer system. 

35. (Original) The apparatus of claim 34, wherein the means for prohibiting comprises 
means for disabling any functions on the computer system that are capable of initiating 
unauthorized processes on the computer system. 

36. (Original) The apparatus of claim 34, wherein the means for prohibiting comprises 
means for configuring one or more programming hooks of the computer system. 

37. (Cancelled). 

38. (Previously presented) The apparatus of claim 29, further comprising: 
means for recording each detection of an unauthorized process. 

39. (Cancelled). 

40. (Cancelled). 

41 . (Original) The apparatus of claim 39, further comprising: 
means for managing a list of unauthorized processes, 

wherein the means for prohibiting comprises means for comparing, for each detected 
process, the detected process to the list of unauthorized processes, and wherein the means for 
prohibiting comprises terminating each detected process that is on the list. 

42. (Original) The apparatus of claim 39, further comprising: 

means for managing a list of processes authorized to be executed on the computer 

system, 

wherein the means for prohibiting comprises means for comparing, for each detected 
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process, the detected process to the list of authorized processes, and wherein the means for 
prohibiting comprises means for terminating each detected process that is not on the list. 

43. (Currently Amended) A computer program product, comprising: 
a computer-readable medium; and 

computer-readable signals stored on the computer-readable medium that define 
instructions that, as a result of being executed by a computer, instruct the computer to perform a 
process of a process of securely executing on a computer system an application for receiving, 
from a user of the computer system, at least one response to at least one question of an 
examination, the computer system comprising an input device and a display device for 
displaying content to the user, the process comprising acts of 

(A) executing the application on the computer system, comprising displaying an area 
on the display device in which the user can enter a response to at least one question of the 
examination, and enabling the user to use the input device to input a response for one or more of 
the questions into the displayed area; and 

(B) prohibiting the computer system from accessing any unauthorized content during 
execution of the application and from displaying any authorized content to the user during 
execution of the application, 

wherein the act (B) comprises detecting and terminating any unauthorized processes 
executing during the displaying of the area on the display device^ 

wherein act (B)(1) comprises acts of (a) detecting any processes executing on the 
computer system during execution of the application, (b) for each detected process, determining 
if the detected process is authorized to execute on the computer system during execution of the 
application, and (c) for each detected process, if the detected process is unauthorized, terminating 
the detected process, and 

wherein the computer system comprises a registry that lists all processes currently 
executing on the computer system, and act (B)(1)(a) comprises an act of periodically accessing 
the registry on the computer system at predefined intervals to ascertain the processes currently 
executing on the computer system . 
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44. (Currently Amended) A method of securely executing an application on a computer 
system, the method comprising acts of 

(A) executing the application on the computer system, including displaying an area on 
a display device in which a user can enter information; and 

(B) prohibiting the computer system from accessing any unauthorized content during 
execution of the application and from displaying any authorized content to a user of the 
computer system during execution of the application, 

wherein the act (B) comprises detecting and terminating any unauthorized processes 
executing during the displaying of the area on the display device^ 

wherein act (B)(1) comprises acts of (a) detecting any processes executing on the 
computer system during execution of the application, (b) for each detected process, determining 
if the detected process is authorized to execute on the computer system during execution of the 
application, and (c) for each detected process, if the detected process is unauthorized, terminating 
the detected process, and 

wherein the computer system comprises a registry that lists all processes currently 
executing on the computer system, and act (B)(1)(a) comprises an act of periodically accessing 
the registry on the computer system at predefined intervals to ascertain the processes currently 
executing on the computer system . 

45. (Original) The method of claim 44, wherein prior to performance of act (A), one or more 
unauthorized processes are executing on the computer system, and wherein act (B) comprises an 
act of terminating the one or more unauthorized processes prior to performing act (A). 

46. (Original) The method of claim 44, wherein act (B) comprises an act of (1) configuring 
the application such that unauthorized content cannot be accessed by the application. 

47. (Original) The method of claim 46, wherein act (B)(1) comprises an act of configuring 
the application such that unauthorized processes cannot be initiated by the application. 

48. (Original) The method of claim 44, wherein act (B) comprises an act of (1) prior to 
executing act (A), disabling any functions on the computer system capable of performing at least 
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one of the following: accessing unauthorized content or displaying unauthorized content to a user 
of the computer system. 

49. (Original) The method of claim 48, wherein act (B)(1) comprises an act of disabling any 
functions on the computer system that are capable of initiating processes on the computer 
system. 

50. (Original) The method of claim 48, wherein act (B)(1) comprises an act of configuring 
one or more programming hooks of the computer system. 

51. (Cancelled). 

52. (Previously presented) The method of claim 44, further comprising: (D) recording each 
detection of an unauthorized process. 

53. (Cancelled). 

54. (Cancelled). 

55. (Original) The method of claim 53, further comprising an act of: 

(C) managing a list of unauthorized processes not authorized to be executed on the 
computer system, 

wherein act (B)(1)(b) comprises an act of, for each detected process, comparing the 
detected process to the list of unauthorized processes, and wherein act (B)(1)(c) comprises, for 
each detected process, terminating the detected process if the detected process is on the list. 

56. (Original) The method of claim 53, further comprising an act of: 

(C) managing a list of processes authorized to be executed on the computer system, 
wherein act (B)(1)(b) comprises an act of, for each detected process, comparing the 
detected process to the list of authorized processes, and wherein act (B)(1)(c) comprises, for each 
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detected process, terminating the detected process if the detected process is not on the list. 

57. (Original) The method of claim 44, wherein the application is for receiving, from a user 
of the computer system, at least one response to at least one question of an examination, the 
computer system comprises an input device and a display device for displaying content to the 
user, and act (A) comprises acts of displaying an area on the display device in which the user can 
enter a response to the at least one question of the examination, and enabling the user to use the 
input device to input a response for one or more of the questions into the displayed area. 

58. (Original) The method of claim 57, wherein act (A) further comprises an act of 
displaying the at least one question of the examination on the display device. 

59. (Currently Amended) An apparatus for securely executing an application on a computer 
system, the apparatus comprising: 

an application-executing component to execute the application on the computer system, 
including displaying an area on a display device in which a user can enter information; and 

a security component to prohibit the computer system from accessing any unauthorized 
content during execution of the application and from displaying any authorized content to a user 
of the computer system during execution of the application, 

wherein the security component detects and terminates any unauthorized processes 
executing during the displaying of the area on the display device^ 

wherein the process-terminating logic comprises detection logic to detect any processes 
executing on the computer system during execution of the application, determining logic to 
determine, for each detected process, if the detected process is authorized to execute on the 
computer system during execution of the application, and terminating logic to terminate, for each 
detected process, the detected process if the detected process is unauthorized, and 

wherein the computer system comprises a registry that lists all processes currently 
executing on the computer system, and wherein the detection logic is operative to periodically 
access the registry on the computer system at predefined intervals to ascertain the processes 
currently executing on the computer system . 
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60. (Original) The apparatus of claim 59, wherein the security component comprises 
process-terminating logic to terminate any unauthorized processes executing on the computer 
system prior to execution of the application. 

61. (Original) The apparatus of claim 59, the security component comprises application- 
configuring logic to configure the application such that unauthorized content cannot be accessed 
by the application. 

62. (Original) The apparatus of claim 61, wherein the application-configuring logic is 
operative to configure the application such that unauthorized processes cannot be initiated by the 
application. 

63. (Original) The apparatus of claim 59, wherein the security component comprises 
function-disabling logic to disable, prior to execution of the application, any functions on the 
computer system capable of performing at least one of the following: accessing unauthorized 
content or displaying unauthorized content to a user of the computer system. 

64. (Original) The apparatus of claim 63, wherein the function-disabling logic is operative to 
disable any functions on the computer system that are capable of initiating processes on the 
computer system. 

65. (Original) The apparatus of claim 63, wherein the function-disabling logic is operative to 
configure one or more programming hooks of the computer system. 

66. (Cancelled). 

67. (Previously presented) The apparatus of claim 59, wherein the security component 
comprises recording logic to record each detection of an unauthorized process. 

68. (Cancelled). 
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69. (Cancelled). 

70. (Original) The apparatus of claim 68, wherein the security component further comprises 
list-managing logic to maintain a list of unauthorized processes not authorized to be executed on 
the computer system the determining logic is operative to compare, for each detected process, the 
detected process to the list of unauthorized processes, and the terminating logic is operative to 
terminate, for each detected process, the detected process if the detected process is on the list. 

71 . (Original) The apparatus of claim 68, wherein the security component further comprises 
list-managing logic to maintain a list of processes authorized to be executed on the computer 
system, the determining logic is operative to compare, for each detected process, the detected 
process to the list of authorized processes, and the terminating logic is operative to terminate, for 
each detected process, the detected process if the detected process is not on the list. 

72. (Original) The apparatus of claim 59, wherein the application is for receiving, from a 
user of the computer system, at least one response to at least one question of an examination, and 
the computer system comprises an input device and a display device for displaying content to the 
user, and wherein the application-executing component comprises display logic to display an 
area on the display device in which the user can enter a response to the at least one question of 
the examination, and comprises input-enabling logic to enable the user to use the input device to 
input a response for one or more of the questions into the displayed area. 

73. (Original) The apparatus of claim 72, wherein the display logic is operative to display 
the at least one question of the examination on the display device. 

74. (Currently Amended) An apparatus for securely executing an application on a computer 
system, the apparatus comprising: 

means for executing the application on the computer system, including displaying an area 
on a display device in which a user can enter information; and 

means for prohibiting the computer system from accessing any unauthorized content 
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during execution of the application and from displaying any authorized content to a user of the 
computer system during execution of the application, 

wherein the means for prohibiting detects and terminates any unauthorized processes 
executing during the displaying of the area on the display device^ 

wherein the means for prohibiting comprises means for detecting any processes executing 
on the computer system during execution of the application, means for determining, for each 
detected process, if the detected process is authorized to execute on the computer system during 
execution of the application, and means for terminating each detected process determined to be 
unauthorized, and 

wherein the computer system comprises a registry that lists all processes currently 
executing on the computer system, and the means for prohibiting comprises means for 
periodically accessing the registry on the computer system at predefined intervals to ascertain the 
processes currently executing on the computer system . 

75. (Original) The apparatus of claim 74, wherein the means for executing the application 
further comprises means for displaying the at least one question of the examination on the 
display device. 

76. (Original) The apparatus of claim 74, wherein the means for prohibiting comprises 
means for terminating any unauthorized processes executing on the computer system prior to 
execution of the application. 

77. (Original) The apparatus of claim 74, wherein the means for prohibiting comprises 
means for configuring the application such that unauthorized content cannot be accessed by the 
application. 

78. (Original) The apparatus of claim 77, wherein the means for prohibiting comprises 
means for configuring the application such that unauthorized processes cannot be initiated by the 
application. 
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79. (Original) The apparatus of claim 74, wherein the means for prohibiting comprises 
means for disabling, prior to execution of the application, any functions on the computer system 
capable of performing at least one of the following: accessing unauthorized content and 
displaying unauthorized content to a user of the computer system. 

80. (Original) The apparatus of claim 79, wherein the means for prohibiting comprises 
means for disabling any functions on the computer system that are capable of initiating 
unauthorized processes on the computer system. 

81 . (Original) The apparatus of claim 79, wherein the means for prohibiting comprises 
means for configuring one or more programming hooks of the computer system. 

82. (Cancelled). 

83. (Previously presented) The apparatus of claim 74, further comprising: 
means for recording each detection of an unauthorized process. 

84. (Cancelled). 

85. (Cancelled). 

86. (Original) The apparatus of claim 84, further comprising: 
means for managing a list of unauthorized processes, 

wherein the means for prohibiting comprises means for comparing, for each detected 
process, the detected process to the list of unauthorized processes, and wherein the means for 
prohibiting comprises terminating each detected process that is on the list. 

87. (Original) The apparatus of claim 84, further comprising: 

means for managing a list of processes authorized to be executed on the computer 

system, 

wherein the means for prohibiting comprises means for comparing, for each detected 
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process, the detected process to the list of authorized processes, and wherein the means for 
prohibiting comprises means for terminating each detected process that is not on the list. 

88. (Original) The apparatus of claim 74, wherein the application is for receiving, from a 
user of the computer system, at least one response to at least one question of an examination, the 
computer system comprises an input device and a display device for displaying content to the 
user, and 

wherein the means for executing the application comprises means for displaying an area 
on the display device in which the user can enter a response to the at least one question of the 
examination, and means for enabling the user to use the input device to input a response for one 
or more of the questions into the displayed area. 

89. (Original) The apparatus of claim 88, wherein the means for executing the application 
comprises means for displaying the at least one question of the examination on the display 
device. 

90. (Currently Amended) A computer program product, comprising: 
a computer-readable medium; and 

computer-readable signals stored on the computer-readable medium that define 
instructions that, as a result of being executed by a computer, instruct the computer to perform a 
process of securely executing an application on a computer system, the process comprising acts 
of: 

(A) executing the application on the computer system, including displaying an area on 
a display device in which a user can enter information; and 

(B) prohibiting the computer system from accessing any unauthorized content during 
execution of the application and from displaying any authorized content to a user of the 
computer system during execution of the application, 

wherein the act (B) comprises detecting and terminating any unauthorized processes 
executing during the displaying of the area on the display devicei 

wherein act (B)(1) comprises acts of (a) detecting any processes executing on the 
computer system during execution of the application, (b) for each detected process, determining 
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if the detected process is authorized to execute on the computer system during execution of the 
a pplication, and (c) for each detected process, if the detected process is unauthorized, terminating 
the detected process, and 

wherein the computer system comprises a registry that lists all processes currently 
executing on the computer system, and act (B)(1)(a) comprises an act of periodically accessing 
the registry on the computer system at predefined intervals to ascertain the processes currently 
executing on the computer system . 
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